Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbadb9ad-6ebc-310c-8ddf-2eedc0d60675.roa
File: dbadb9ad-6ebc-310c-8ddf-2eedc0d60675.roa (raw, json)
Hash identifier: Gi32CYZDrJ9hy9iCF4XTj9cD/C4sl36gx6TvCHeh0yw=
Subject key identifier: B5:16:31:7C:BB:45:75:33:09:F5:B4:53:55:AA:4D:4B:57:A3:9B:79
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401CBF6C7150B7CCD5F6F96700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbadb9ad-6ebc-310c-8ddf-2eedc0d60675.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.184.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:bf:6c:71:50:b7:cc:d5:f6:f9:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=ed427a69-ef95-4260-a0fc-f42951ec520e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:f6:8d:fe:ba:44:98:77:da:e1:5a:6f:d7:
1b:bc:a7:de:9b:42:74:8d:8c:79:26:57:1a:92:44:
a4:89:11:22:09:ae:82:f3:87:66:0f:4d:83:4a:dd:
da:34:e2:1a:64:a1:48:66:6a:9d:d9:68:eb:fa:fa:
56:cc:28:cb:63:9c:7c:81:27:20:9b:89:b7:81:ba:
9e:11:9a:65:82:a0:c7:ea:08:f0:73:51:77:82:a3:
92:2f:88:88:69:4a:7e:1f:02:65:2c:61:af:bb:04:
52:13:7e:41:e7:15:8c:1a:42:4b:19:5e:de:38:72:
ec:6f:e7:4a:d0:bf:04:4e:99:a5:47:44:ea:a7:76:
ab:8b:bb:e0:cb:85:c3:24:2d:84:24:db:48:6f:a5:
7d:bb:17:a7:da:81:80:31:c5:d4:ab:86:de:74:e6:
52:bd:b6:07:a2:91:c6:8e:19:62:fc:52:1a:4c:68:
7d:ba:f2:f4:71:8b:cc:2a:6e:2b:38:d4:f8:0d:19:
2c:d0:c5:14:1d:84:f5:79:df:08:7b:b1:ae:ae:12:
bd:b5:f7:5c:a8:e6:86:f9:62:3d:4a:0d:7d:3e:83:
07:b4:c0:95:8c:19:5f:ef:42:38:5b:d6:d6:f6:6d:
c3:68:c0:a1:db:76:26:bf:0d:cd:3f:82:34:37:cc:
50:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:31:7C:BB:45:75:33:09:F5:B4:53:55:AA:4D:4B:57:A3:9B:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbadb9ad-6ebc-310c-8ddf-2eedc0d60675.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.184.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:98:64:d2:ba:18:12:4a:2f:75:b9:d6:3f:fc:44:3b:da:df:
70:e5:77:4b:c7:d1:b1:43:9e:31:f3:b3:a1:09:77:5e:1c:da:
e2:d8:16:53:32:50:f8:0c:a0:1e:9f:60:70:7a:7b:ab:81:0d:
e2:17:c8:5d:bb:88:4b:d1:5d:e3:7f:df:d8:f5:84:72:f2:08:
a6:83:c2:9b:14:50:25:c4:aa:24:be:30:53:76:6a:4c:d6:26:
48:6e:e5:b0:26:a7:57:6b:b6:79:d3:f7:4a:23:d5:70:28:2c:
6a:83:ff:94:e9:5c:59:1d:50:69:8a:6c:5e:26:ab:4d:c6:fb:
7f:3d:30:59:d0:4a:a1:fa:32:91:59:63:2a:8e:7f:6c:d9:67:
5c:88:8b:ba:49:22:cb:34:ea:06:43:f7:b1:2f:a9:26:cb:a8:
86:8e:9f:74:16:6a:60:23:f6:0d:b4:5b:5e:2d:6f:81:6a:c9:
53:21:2a:69:ac:d2:b4:fa:3d:89:b7:6d:73:bd:d8:3e:aa:e6:
5c:80:6b:8c:77:66:85:19:5c:dd:55:d9:de:e5:e7:17:96:2b:
18:b0:a5:07:6b:b7:cf:1c:c0:c6:06:e0:5f:ea:f5:80:07:e0:
5a:6c:a7:c4:6d:86:17:d4:ab:2e:bd:88:fd:ac:23:e5:b4:d0:
3a:cc:bb:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:43 2025 by rpki-client